Install

MCPFirewall is available as a desktop app (recommended) or a CLI binary. No account, no cloud dependency, no telemetry.

Desktop App

The desktop app is the easiest way to get started. It bundles the gateway, handles auto-start, auto-updates, and includes a tray icon.

macOS: download the .dmg from mcpfirewall.app, open it, and drag MCPFirewall to Applications.

Windows: download the installer (.exe) from mcpfirewall.app and run it.

Linux: download the .AppImage or .deb package from mcpfirewall.app.

Once installed, open MCPFirewall. The gateway starts automatically and the dashboard opens. You are ready to go.

If macOS blocks the app with “cannot be opened because the developer cannot be verified”, right-click it, select Open, and confirm.

Curl

Available on macOS and Linux:

curl -fsSL https://mcpfirewall.app/install.sh | sh

Then start the gateway:

mcpfw serve

Windows MSI

For managed or silent installs:

Download the .msi package from mcpfirewall.app.

WSL2

Install inside your WSL2 Linux distribution:

curl -fsSL https://mcpfirewall.app/install.sh | sh

WSL2 requires a special bind address so that Windows AI clients can reach the gateway:

mcpfw serve --bind-addr 0.0.0.0

MCPFirewall detects WSL2 automatically and adjusts the bind address if you do not specify one.

Next step

If you installed the desktop app, head to Quick Start.

If you installed via CLI, head to Quick Start (CLI).